Overview

overview

10

Static

static

10

eeeeeeeeeeeee.exe

windows7-x64

10

eeeeeeeeeeeee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eeeeeeeeeeeee.exe

  • Size

    78KB

  • MD5

    95b6e74306ec397f49c969e58c0eac96

  • SHA1

    75f0786e21294da9aa9bba2c4e95455bd9c76d86

  • SHA256

    46e0cc440430652cfd19445aeefd16b3a5f301d7a8a19592820458ed10cf7077

  • SHA512

    6f298ae85fd480fa34d08ad5de14e26c9ca698c6b8fab916cf9357046d8de78ea8beab55d236b5b44cdb418ff7aefb811e4a9c3657f96412dbdb5d0cda5ad532

  • SSDEEP

    1536:eXwS6uPsLUFnvMpqa5PYMybym7WYMcwqqPSh8hoWs6QwgOoj6FpMu:Ml+LUFvkPYHbym7WYMLQpOoj6Uu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

7.tcp.eu.ngrok.io:18636

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eeeeeeeeeeeee.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections